The repository includes tests, a usable README, and matching MIT licensing. Its alpha status and single-contributor ownership call for tighter upgrade testing.
68%
Total Score
67
83
83
The repository is owned by an individual account rather than an organization, so the single-contributor concentration is not visibly backed by a broader organizational maintenance pool.
One contributor made all 147 recent commits, leaving no demonstrated handoff capacity if that maintainer becomes unavailable.
The repository has zero stars and forks and one watcher, indicating little visible external adoption. Popularity is only supporting evidence, so this modestly lowers confidence rather than determining the verdict.
Composer build tooling is present, but no security-scanning tooling was detected. That is a modest transparency and maintenance gap, not evidence that the package is unsafe.
The repository has no security policy, so users have no documented channel or process for reporting vulnerabilities.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
slim/psr7 Version ^1.7 | — | — |
slim/slim Version ^4.15.2 | — | — |
aura/session Version ^4.0 | — | — |
nesbot/carbon Version ^3.8 | — | — |
php-di/php-di Version ^7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.